Links

Vendor Firmware Sourcecode for V1 not avaliable online, original manual (but not firmware downloads) has an source code offer ('send $20 via money order and 1 CD-R and we'll return the GPL source of a single firmware version of a single product').

Serial

JP1 (unpopulated 4 pin connector), located near the "AOSS" button on the top of the case.
Pin 1 is the pin with the square pad, towards the edge of the board with LEDs on it.

Pin 1

Pin 2

Pin 3

Pin 4

3.3V

TX

RX

GND

TFTP

When powered with the reset button held down, it attempts to download "firmware.ram" from a TFTP server at 192.168.11.2 and sets its IP to 192.168.11.1. Timeout is set to "10". After a timeout, the router continues to boot linux. If the reset button continues to be held down, the device resets once the busybox "press enter for prompt" is displayed.